Where Government & The NIST Cybersecurity Framework Meet

The National Institute of Standards and Technology (NIST) works to promote U.S. innovation and competitiveness by advancing science, standards and related technology through research and development in ways that enhance economic security and improve quality of life. To help the nation address its greatest information security challenges, NIST’s cybersecurity programs seek to enable greater development and application of innovative security technologies. More specifically, NIST provides guidelines for federal, state and local agencies to help them address the nation’s greatest challenges, like cyberthreats.

That’s why, in 2014, the institute developed the NIST Cybersecurity Framework (CSF), which was created through collaboration between industry and government. The CSF consists of standards, guidelines and practices to promote the protection of critical infrastructure and improve government security.

To gauge how government is using the Cybersecurity Framework and its effectiveness, GovLoop partnered with Symantec, a leader in addressing advanced security threats, to survey 284 public-sector employees. The survey focused on the CSF’s usage, perception and outcomes in government cybersecurity.

This research brief summarizes the findings of the survey while addressing how to get more agencies to adopt the CSF, as well as continuing cyber education and best practices.